A practitioner’s note on the arrest of two accused in Kerala for a Rs 94 lakh WhatsApp-based trading fraud, and what it illustrates about jurisdiction, asset tracing, and prosecution strategy in interstate cyber fraud cases.

Arrest — Thiruvananthapuram, KeralaTrial — Khammam, TelanganaAmount — Rs 94 lakh alleged

In this note

1. Jurisdiction and the Transit Warrant Mechanism
2. The Statutory Framework Likely in Play
3. The Recovery Gap: The Real Story for Victims’ Counsel
4. Practical Takeaways for Practitioners
5. FAQs on Cross-State Cyber Fraud Prosecution

The Facts

Khammam district cyber crime police arrested two persons, identified as Ashina and Nisamuddin, in Thiruvananthapuram, Kerala, in connection with an online investment fraud running to approximately Rs 94 lakh.

Commissioner of Police Sunil Dutt stated that the accused deceived a Khammam-based employee by promising high returns on online trading and investments through an entity called “Dolat Capital Investment Club,” after contacting the victim on WhatsApp and luring him into investing via specific links and applications. Of the total amount lost, only about Rs 13 lakh has so far been traced to the bank accounts of the two arrested accused, who were brought to Khammam on a transit warrant, produced before the cyber crime court, and remanded to judicial custody.

On its face, this is a modest case by the standards of Khammam’s cyber crime unit — the same commissioner’s office secured 18 arrests in a Rs 547-crore mule-account racket earlier this year. But the smaller scale is precisely what makes this case a useful teaching example: it compresses the full procedural lifecycle of an interstate cyber fraud prosecution — jurisdiction, cross-state arrest, asset tracing, and the recovery gap — into a single, legible fact pattern.

Jurisdiction and the Transit Warrant Mechanism

The arrest of Kerala-based accused by Telangana police, followed by their production before the Khammam cyber crime court, illustrates a recurring procedural feature of cyber fraud cases: the offence is registered where the victim resides or where the complaint is filed, while the accused are frequently traced to a different state entirely, often several states away from both the victim and the money trail.

Movement of the accused under transit warrant

A transit warrant — issued under the Bharatiya Nagarik Suraksha Sanhita’s provisions on inter-state execution of warrants (the successor framework to Sections 78–81 CrPC) — allows the arresting state’s police to lawfully move an accused from the state of arrest to the state where the FIR is registered and the trial will proceed.

For practitioners, a few points are worth flagging:

• Custody timelines start running from the point of arrest, not from production before the home-state magistrate, so counsel on either side needs to track the 24-hour production requirement carefully across the transit period.
• Local counsel coordination becomes necessary in two states simultaneously — one to secure or contest bail/remand at the point of arrest, and another to handle the substantive prosecution at the trial court. Cases have been lost on both sides purely on procedural missteps during transit.
• Cyber crime jurisdiction itself is often contested — Section 4 of the erstwhile IT Act (now read with the BNSS) permits registration where any part of the offence, including receipt of the fraudulent communication or the financial transaction, occurred, which is why victims can generally file where they are located rather than having to travel to the accused’s home state.

The Statutory Framework Likely in Play

Although the police statement doesn’t enumerate the specific charges, the fact pattern — a WhatsApp-initiated approach, a named “investment club” entity, promised trading returns, and app/link-based fund transfers — maps onto a fairly standard charge-sheet combination in Telangana cyber fraud prosecutions.

The Recovery Gap: The Real Story for Victims’ Counsel

The most legally significant detail in this case isn’t the arrest — it’s the ratio. Of Rs 94 lakh allegedly defrauded, only around Rs 13 lakh has been traced to the accused’s accounts.

Traced vs. untraced funds

₹13L

That roughly 14% recovery rate is not unusual in investment fraud cases of this kind, and it points to where the real litigation and investigative work lies.

• Freezing orders need to move faster than the fraud does.

Under Section 43A of the IT Act and coordination through the National Cyber Crime Reporting Portal, banks can freeze suspicious inbound transfers, but only within a narrow window before funds are layered through further mule accounts or converted to cryptocurrency. Counsel advising victims should push for freeze requests to be filed within hours, not days, of the fraud being discovered.

• Civil recovery is often the more realistic remedy than criminal restitution

A criminal conviction establishes liability but rarely returns the full defrauded amount; victims’ counsel should evaluate parallel civil recovery suits or PMLA attachment proceedings against traceable assets (property, vehicles) purchased with fraud proceeds, a pattern seen repeatedly in Khammam’s larger cyber fraud cases.

• The “investment club” entity itself may be worth pursuing separately.

“Dolat Capital Investment Club” was operating as an unregistered collective investment scheme, it may independently attract liability under the SEBI Act or state-level Protection of Depositors Acts, giving victims’ counsel an additional forum beyond the criminal cyber fraud case.

Practical Takeaways for Practitioners

For victims’ counsel

File freeze requests and NCRP complaints immediately; the gap between fraud and reporting is the single biggest determinant of eventual recovery.

For defence counsel

Scrutinise the evidentiary basis for attributing the full Rs 94 lakh to the two arrested accused specifically, given that only Rs 13 lakh has been traced to their accounts — this is precisely the kind of gap where a “mule account holder vs orchestrator” distinction becomes a live sentencing issue.

For both sides

Watch whether the investigation broadens into a PMLA case, since that changes the applicable bail standard (Section 45 PMLA’s twin conditions are considerably more stringent than ordinary criminal bail) and brings the Enforcement Directorate into a case that started as a state cyber crime matter.

For clients generally

This case is a useful cautionary reference — unsolicited WhatsApp investment pitches promising high, consistent trading returns remain one of the most common vectors for cyber fraud in India, and clients should be advised to independently verify any investment platform against SEBI’s registered intermediaries list before transferring funds.

FAQs on Cross-State Cyber Fraud Prosecution

What is a transit warrant and why is it used in cyber fraud cases?

A transit warrant allows police from the state where an FIR is registered to lawfully move an accused arrested in another state back to face trial. It’s common in cyber fraud cases because the offence is typically registered where the victim resides, while accused persons are often traced to a different state entirely.

Which laws apply to WhatsApp-based investment fraud in India?

Typically a combination of BNS provisions on cheating and criminal breach of trust, IT Act Section 66D (cheating by personation using a computer resource), and, where funds are layered through multiple accounts, the Prevention of Money Laundering Act (PMLA).

Why is only a small portion of defrauded money usually recovered?

Because fraud proceeds are typically moved through multiple mule accounts or converted into cryptocurrency within hours of receipt. Recovery depends heavily on how quickly a freeze request is filed after the fraud is discovered — delays of even a day or two sharply reduce the traceable amount.

Can victims pursue recovery outside the criminal case?

Yes. Civil recovery suits and PMLA attachment proceedings against traceable assets (property, vehicles) purchased with fraud proceeds are often more effective at recovering funds than waiting for the outcome of the criminal trial alone.

Is an unregistered “investment club” like this one separately actionable?

Potentially. If the entity was operating as an unregistered collective investment scheme, it may attract independent liability under the SEBI Act or applicable state Protection of Depositors Acts, giving victims a second forum beyond the cyber fraud FIR.